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We show how entanglement shared between encoder and decoder can sim- 
plify the theory of quantum error correction. The entanglement-assisted quan- 
tum codes we describe do not require the dual-containing constraint necessary 
for standard quantum error correcting codes, thus allowing us to "quantize" 
all of classical linear coding theory. In particular, efficient modern classical 
codes that attain the Shannon capacity can be made into entanglement-assisted 
quantum codes attaining the hashing bound (closely related to the quantum 
capacity). For systems without large amounts of shared entanglement, these 
codes can also be used as catalytic codes, in which a small amount of initial 
entanglement enables quantum communication. 
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Entanglement plays a central role in quantum information processing. It enables the tele- 
portation of quantum states without physically sending quantum systems Q; it doubles the 
capacity of quantum channels for sending classical information (01; it is known to be necessary 
for the power of quantum computation We show how shared entanglement provides a 

simpler and more fundamental theory of quantum error correction. 

The theory of quantum error correcting codes was established a decade ago as the primary 
tool for fighting decoherence in quantum computers and quantum communication systems. The 
first nine-qubit single error-correcting code was a quantum analog of the classical repetition 
code, which stores information redundantly by duplicating each bit several times (5). Probably 
the most striking development in quantum error correction theory is the use of the stabilizer 
formalism (0[7||H||P|), whereby quantum codes are subspaces ("code spaces") in Hilbert space, 
and are specified by giving the generators of an abelian subgroup of the Pauli group, called 
the stabilizer of the code space. Essentially, all QECCs developed to date are stabilizer codes. 
The problem of finding QECCs was reduced to that of constructing classical dual-containing 
quaternary codes (6). When binary codes are viewed as quaternary, this amounts to the well 
known Calderbank-Shor-Steane construction U0W1R . The requirement that a code contain its 
dual is a consequence of the need for a commuting stabilizer group. The virtue of this approach 
is that we can directly construct quantum codes from classical codes with a certain property, 
rather than having to develop a completely new theory of quantum error correction from scratch. 
Unfortunately, the need for a self-orthogonal parity check matrix presents a substantial obstacle 
to importing the classical theory in its entirety, especially in the context of modern codes such 
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as low-density parity check (LDPC) codes (U21) . 

Assume that the encoder Alice and decoder Bob have access to shared entanglement. We 
will argue that in this setting every quaternary (or binary) classical linear code, not just dual- 
containing codes, can be transformed into a QECC, and illustrate this with a particular example. 
If the classical codes are not dual-containing, they correspond to a set of stabilizer generators 
that do not commute; however, if shared entanglement is an available resource, these generators 
may be embedded into larger, commuting generators, giving a well-defined code space. We 
call this the entanglement-assisted stabilizer formalism, and the codes constructed from it are 
entanglement-assisted QECCs (EAQECCs). 

Standard stabilizer formalism. The power of the stabilizer formalism comes from the clever 
use of group theory. Let II denote the set of Pauli operators {/ , X,Y, Z}, and let IP = 
{I, X, Y, Z}® 11 denote the set of n-fold tensor products of single-qubit Pauli operators. Then 
IP together with the possible overall factors ±1, ±i forms a group Q n under multiplication, the 
n-fold Pauli group. Here are a few useful properties of the n-fold Pauli group: (a) every element 
of Q n squares to ±I„ (plus or minus the identity); (b) any two elements of Q n either commute or 
anti-commute; (c) every element of Q n is unitary; and (d) elements of Q n are either Hermitian 
or anti-Hermitian. The connection of Q n to error correction is straightforward: the elements of 
Q n can be identified as possible sets of errors that might affect a quantum register of n qubits. 
Suppose S is an abelian subgroup of Q n . We define the stabilizer code C(S) associated with 
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S to be 

C(S) = : M\ij) = |V),VM G S}. 

The code C(«S) is the subspace fixed by S, so S is called the stabilizer of the code. In other 
words, the code space is the simultaneous +1 eigenspace of all elements of S. For an [[n, k]} 
stabilizer code, which encodes k logical qubits into n physical qubits, C{S) has dimension 2 k 
and S has 2 n ~ k elements (9). We should notice that for group S to be the stabilizer of a nontrivial 
subspace, it must satisfy two conditions: the elements of S commute, and — J„ is not in S. (This 
second condition implies that all elements of S are Hermitian, and hence have eigenvalues ±1.) 

A group S can be specified by a set of independent generators, {Mi}. These are elements 
in S that cannot be expressed as products of each other, and such that each element of S can be 
written as a product of elements from the set. If an abelian subgroup S of Q n has 2 n ~ k distinct 
elements up to an overall phase, then there are n — k independent generators. The benefit of 
using generators is that it provides a compact representation of the group; and to see whether a 
particular vector is stabilized by a group S, we need only check whether \ip) is stabilized 
by these generators of S. 

Suppose C(S) is a stabilizer code, and the quantum register is subject to errors from an error 
set E = {E a } C Gn- How are the error-correcting properties of C(S) related to the generators 
of SI First, suppose that E a anti-commutes with a particular stabilizer generator M t of S. Then 

MiEM = —E a Mi\ifj) = -E a \^). 

E a \ijj) is an eigenvector of Mi with eigenvalue —1, and hence must be orthogonal to the code 
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space (all of whose vectors have eigenvalue +1). As the error operator E a takes the code space 
of C(S) to an orthogonal subspace, an occurrence of E a can be detected by measuring Mj. For 
each generator and error operator E a , we can define a coefficient s iA e {0, 1} depending on 
whether M { and E a commute or anti-commute: 

The vector s a = (si j0 , S2, , • • • , s n _fc j0 ) represents the syndrome of the error E a . In the case of a 
nondegenerate code, the error syndrome is distinct for all E a e £, so that measuring the n — k 
stabilizer generators will diagnose the error completely. However, a uniquely identifiable error 
syndrome is not always required for an error to be correctable. 

What if E a commutes with the generators of SI If E a e S, we do not need to worry, 
because the error does not corrupt the space at all. The real danger comes when E a commutes 
with all the elements of S but is not itself in S. The set of elements in Q n that commute with all 
of S is the centralizer Z(S) of S. If E G Z(S) — S, then E changes elements of C(S) but does 
not take them out of C{S). Thus, if M e S and \ip) e C(S), then 

ME\ip) = EM\tp) = E\tp). 

Because E £ S, there is some state of C(S) that is not fixed by E. E will be an undetectable 
error for this code. Putting these cases together, a stabilizer code C(S) can correct a set of errors 
£ if and only if E\E h e S U {Q n - Z(S)) for all E a , E b e £. 
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Entanglement-assisted stabilizer codes. We will now illustrate the idea of the entanglement- 
assisted stabilizer formalism by an example. We know from the previous paragraph that a 
stabilizer code can be constructed from a commuting set of operators in Q n . What if we are 
given a non-commuting set of operators? Can we still construct a QECC? Let S be the group 
generated by the following non-commuting set of operators: 



Mi = 


Z 


X 


z 


I 


M 2 = 


Z 


z 


I 


z 


M 3 = 


X 


Y 


X 


I 


M 4 = 


X 


X 


I 


X 



It is easy to check the commutation relations of this set of generators: M x anti-commutes with 
the other three generators, M 2 commutes with M 3 and anti-commutes with M 4 , and M 3 and 
M 4 anti-commute. We will begin by finding a different set of generators for S with a particular 
class of commutation relations. We then relate S to a group B with a particularly simple form, 
and discuss the error-correcting conditions using B. Finally, we relate these results back to the 
group S. 

To see how this works, we need two lemmas. (See the supporting online material for proofs.) 
The first lemma shows that there exists a new set of generators for S such that S can be de- 
composed into an "isotropic" subgroup Sj generated by a set of commuting generators, and a 
"symplectic" subgroup S s generated by a set of anti-commuting generator pairs ffll. 
Lemma 1. Given any arbitrary subgroup V in Q n that has 2 m distinct elements up to overall 
phase, there exists a set of m independent generators for V of the form {Zi, Z 2 , • • • , Zg, Xi, ■ ■ ■ , X m _i} 
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where to/2 < £ < m, such that [Z i: ZA = [Xi, Xj] = 0, for all i, j; [Z i: Xj] = 0, for all % ^ j; 
and {Zi, Xi} = 0, for all i. Here [A, B] is the commutator and {A, B} the anti-commutator 
of A with B. Let V/ = (Z m _^+i, • • • , Z^) denote the isotropic subgroup generated by the set 
of commuting generators, and let Vs = (Zi, ■ ■ ■ , Z m _^, X i: ■ ■ ■ , X m _^) denote the symplectic 
subgroup generated by the set of anti-commuting generator pairs. Then, with slight abuse of the 
notation, V = (V/, Vs) indicates that V is generated by subgroups V/ and Vs. 

For the group S that we are considering, one such set of independent generators is 

Zi = Z X Z I 
X 1 = Z Z I z 

(2) 

~Z 2 = Y X X Z 
Z 3 = Z Y Y X 
so that S s = (Z^XJ, Sj = (Z 2 , Z 3 ), and S = (Sj, S s ). 

The choice of the notation Z; L and X; t is not accidental: these generators have exactly the 
same commutation relations as a set of Pauli operators Zi and Xi on a set of qubits labeled by 
i. Let B be the group generated by the following set: 

Zi = Z I I I 
Xi— X I I I 

(3) 

Z 2 = I Z I I 
Z 3 = I I Z I 

From the previous lemma, B = (Bj, Bs), where Bs = {Zi, Xi) and Bi = (Z 2 , Z 3 ). Therefore, 
groups B and S are isomorphic, which is denoted as B = S. We can then relate S to the simpler 
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group B by the following lemma (f7?l): 

Lemma 2. If B = S, then there exists a unitary [/ such that for all B E B there exists an 
S £ S such that B = U SU' 1 up to an overall phase. 

As a consequence of this lemma, the error-correcting power of C(B) and C(S) are also re- 
lated by a unitary transformation. In what follows, we will use B to discuss the error-correcting 
conditions, and then translate the results back to S. 

What is the code space C(B) described by £>? Because B is not a commuting group, the usual 
definition of C(B) does not apply, as the generators do not have a common eigenspace. However, 
by extending the generators, we can find a new group that is commuting, and for which the usual 
definition of code space can apply; the qubits of the codewords will be embedded in a larger 
space. Notice that we can append a Z operator at the end of Z\, an X operator at the end of Xi, 
and an identity at the end of Z 2 and Z 3 to make B abelian: 





Z 


I 


I 


I 


z 


x[ = 


X 


I 


I 


I 


X 


Z' 2 = 


I 


z 


I 


I 


I 




I 


I 


z 


I 


I 



We assume that the four original qubits are possessed by Alice (the sender), and the additional 
qubit is possessed by Bob (the receiver) and is not subject to errors. Let B e be the extended 
group generated by {Z[, X[, Z' 2 , Z' 3 }. We define the code space C(B) to be the simultaneous 
+ 1 eigenspace of all elements of B e , and we can write it down explicitly in this case: 

C(B)={|*>^|0>|0>|V>}, (5) 
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where |$) AB is a maximally entangled state shared between Alice and Bob, and \ip) is an 
arbitrary single-qubit pure state. Because entanglement is used, this is an EAQECC. We use 
the notation [[n, k; c]] to denote an EAQECC that encodes k qubits into n qubits with the help 
of c ebits. (Sometimes we will write [[n, k, d; c]] to indicate that the "distance" of the code is 
d, meaning it can correct at least |_^J errors.) The number of ebits c needed for the encoding 
is equal to the number of anti-commuting pairs of generators in Bs- The number of ancilla bits 
s is equal to the number of independent generators in £>/. The number of encoded qubits k is 
equal ton — c — s, and we define the rate of the EAQECC to be (k — c)/n. Therefore, C(B) is a 
[[4, 1; 1]] EAQECC with zero rate: n = 4, c — 1, s = 2 and k = 1. Note that the zero rate does 
not mean that no qubits are transmitted by this code! Rather, it implies that a number of bits of 
entanglement is needed that is equal to the number of bits transmitted. In general, k — c can be 
positive, negative, or zero. 

Now we see how the error-correcting conditions are related to the generators of B. We saw 
that if an error E a <g> I B anti-commutes with one or more of the operators in {Z[, X[, Z' 2 , Z^}, 
it can be detected by measuring these operators. This will only happen if the error E a anti- 
commutes with one of the operators in the original set of generators {Z 1: X 1: Z 2: Z 3 }, as the 
entangled bit held by Bob is assumed to be error-free. Alternatively, if E a <g> I B e B e , or 
equivalently if E a e Bj, then E a does not corrupt the encoded state. In this case we call 
the code degenerate. Altogether, C(B) can correct a set of errors £ if and only if E\E b e 
Bj U (£ 4 - Z{B)) for all E a , E b e S . 

With this analysis of B, we can go back to determine the error-correcting properties of our 
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original stabilizer S. We can construct a QECC from a nonabelian group S if entanglement is 
available, just as we did for the group B. We add extra operators Z and X to make S abelian as 
follows: 





z 


X 


Z 


I 


Z 


%= 


z 


Z 


I 


Z 


X 


%= 


Y 


X 


X 


Z 


I 


%= 


Z 


Y 


Y 


X 


I 



(6) 



where the extra qubit is once again assumed to be possessed by Bob and to be error-free. Let S e 
be the group generated by the above operators. Since B = S, let U be the unitary from Lemma 
2. Define the code space C(S) by C(S) = U" 1 (C(B)), where the unitary U is applied only 
on Alice's side. This unitary U can be interpreted as the encoding operation of the EAQECC 
defined by S. Observe that the code space C(S) is a simultaneous eigenspace of all elements 
of S e . As in the analysis for C(B), the code C{S) can correct a set of errors 8 iff E\E h e 
5/ U (Q 4 - Z(S)) for all E a , E b e S. 

The algebraic description is somewhat abstract, so let us translate this into a physical picture. 
Alice wishes to encode a single (k = 1) qubit state \ip) into four (n = 4) qubits, and transmit 
them through a noisy channel to Bob. Initially, Alice and Bob share a single (c = 1) maximally 
entangled pair of qubits — one ebit. Alice performs the encoding operation U on her bit \ip), her 
half of the entangled pair, and two (s = 2) ancilla bits. She then sends the four qubits through 
the channel to Bob. Bob measures the extended generators z[,x' 1: z' 2 , and z' z on the four 
received qubits plus his half of the entangled pair. The outcome of these four measurements 
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gives the error syndrome; as long as the error set satisfies the above requirement, Bob can 
correct the error and decode the transmitted qubit 

We have worked out the procedure for a particular example, but any EAQECC will function 
in the same way. The particular parameters n, k, c, s will vary depending on the code. It should 
be noted that the first example of entanglement-assisted error correction produced a [[3, 1, 3; 2]] 
EAQECC based on the [[5, 1,3]] standard QECC (1751) . Our construction differs in that it is 
completely general and, more important, eschews the need for commuting stabilizers. 

Construction of EAQECCs from classical quaternary codes. We will now examine the 
[[4, 1; 1]] EAQECC given above, and show that it can be derived from a classical non-dual- 
containing quaternary [4, 2] code. This is a generalization of the well-known construction for 
standard QECCs dJ3|). 

First, note that this [[4, 1; 1]] code is non-degenerate, and can correct an arbitrary one-qubit 
error. (Therefore the distance d of the code C(S) is 3.) This is because the 12 errors Y { and 
Zi, i = 1, . . . , 4, have distinct non-zero error syndromes. Xi denotes the bit flip error on i-th 
qubit, Zi denotes the phase error on the i-th qubit, and Yi means that both a bit flip and phase flip 
error occur on the i-th qubit. It suffices to consider only these three standard one-qubit errors, 
because any other one-qubit error can be written as a linear combination of these three errors 
and the identity. 

Next, we define the following map between the Pauli operators and elements of GF(4), the 
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field with four elements: 



n 


I 


X 


Y 


Z 


GF{4) 





UJ 


1 


UJ 



Note that under this map, addition in GF(4) corresponds to multiplication of the Pauli operators, 
up to an overall phase. So multiplication of two elements of Q n corresponds to addition of two 
n-vectors over GF(4), up to an overall phase. 

The set of generators {Mi} given in Eq. CQ) is mapped to the matrix H^. 

( _ \ 

uj uj uj 



Ha 



uj uj uj 
uj 1 w 



i uj uj uj j 



(7) 



Examining the matrix H A , we see that it can be written 



Ha 



ujHa ^ 



ujHa 



(8) 



/ 



where Ha is the parity-check matrix of a classical [4, 2, 3] quaternary code whose rows are not 
orthogonal, and 3 is the minimum distance between codewords: 



1 uj 1 



Ha 



\ 



(9) 



/ 



110 1 

We get a [[4, 1, 3; 1]] EAQECC from a classical [4,2,3] quaternary code. This outper- 
forms the best 4-bit self-dual QECC currently known, which is [[4, 0, 2]] d73t . This connec- 
tion between EAQECCs and quaternary classical codes is quite general (1771) . Given an ar- 
bitrary classical [n, k, d] quaternary code, we can use Eq. © to construct a non-degenerate 
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[[n, 2k — n + c, d; c]] EAQECC. The rate becomes (2k — n)/n because the n — k classical parity 
checks give rise to 2(n — k) quantum stabilizer generators. (The complete details of this con- 
struction, along with rigorous proofs of its performance can be found in the supporting online 
materials.) 

Discussion. Our entanglement-assisted stabilizer formalism enables us to construct QECCs 
from arbitrary classical quaternary codes without the dual-containing constraint. The simpli- 
fication and unification that occurs when entanglement assistance is allowed is an effect well 
known in the context of quantum Shannon theory (Ii£lli9l) . 

The better the classical quaternary code is, the better the corresponding EAQECC will be. 
Searching for good quantum codes now becomes the problem of searching for good classical 
codes, which has been extensively studied and is well understood. Efficient modern codes, such 
as Turbo codes or LDPC codes (571) whose performance approaches the classical Shannon 
limit, can now be used to construct corresponding quantum codes. 

There are two interesting properties of EAQECCs constructed from Eq. ©. A classical 
quaternary code that saturates the Singleton bound will give rise to a quantum code saturating 
the quantum Singleton bound. To see this, assume that the [n, k, d] classical quaternary code 
saturates the classical Singleton bound; that is, n — k > d — 1. The corresponding [[n, 2k — n + 
c, d; c]} quantum code then saturates 

n-(2k-n) = 2(n — k) > 2(d - 1), 
which is the quantum Singleton bound fi2~2~[ . 
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Another feature of EAQECC is that a classical quaternary code that achieves the Shannon 
bound will give rise to a quantum code that achieves the "hashing" limit on a depolarizing 
channel (1231) . Let the rate (in base 4) R c of a [n, k, d] quaternary code meeting the Shannon 
bound of the quaternary symmetric channel be 

#c = C 4 (/) = l-(tf 4 (/) + /log 4 3), 

where / is the error probability and H b (f) = —f \og b f — (1 — /) log 6 (l — /) is the entropy in 
base b. Then the rate (in base 2) Rq of the corresponding [[n, 2k — n + c, d; c]] EAQECC is 

Rq = 2Rc-1 = 1- (H 2 (f) + /log 2 3), 

which is exactly the hashing bound on a depolarizing channel. The hashing bound is a lower 
bound on the closely related quantum channel capacity. It was previously achieved only by 
inefficient random coding techniques (TZTt. 

The use of an EAQECC requires an adequate supply of entanglement. However, these codes 
can be useful even if there is not a large amount of pre-existing entanglement, by turning an 
EAQECC into a catalytic QECC (CQECC). The idea here is simple. Suppose the EAQECC has 
parameters n,k,c. Using c bits of pre-existing entanglement, Alice encodes some of the qubits 
she wishes to transmit, plus one bit each from c maximally entangled pairs that she prepares 
locally. After her n bits have been transmitted to Bob, corrected and decoded, Bob has received 
k — c qubits, plus c new bits of entanglement have been created. These can then be used to 
send another k — c bits, and so on. The idea is that the perfect qubit channel that is simulated 
by the code is a stronger resource than pre-existing entanglement (ITPt . It is this catalytic mode 
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of performance that makes the rate (k — c)/n a reasonable figure of merit for an EAQECC as 
described above. Clearly the [[4, 1, 3; 1]] code described in this paper is useless as a catalytic 
code, though it is perfectly useful for an entanglement-assisted channel. To be a useful catalytic 
code, an EAQECC must have a positive value of k — c. 

We have presented EAQECCs in a communication context up to now, but catalytic codes 
open the possibility of application to error correction in quantum computing, where we can 
think of decoherence as a channel into the future. In this case, the "seed" resource is not pre- 
existing entanglement, but rather a small number of qubits that are error-free, either because 
they are physically isolated, or because they are protected by a decoherence-free subspace or 
standard QECC. 

CQECCs provide great flexibility in designing quantum communication schemes. For ex- 
ample, in periods of low usage we can use an EAQECC in the catalytic mode to build up shared 
entanglement between Alice and Bob. Then in periods of peak demand, we can draw on that 
entanglement to increase the capacity. Quantum networks of the future can use schemes like 
this to optimize performance. In any case, the existence of practical EAQECCs will greatly 
enhance the power of quantum communications, as well as providing a beautiful connection to 
the theory of classical error correction codes. 

References and Notes 

1. C. H. Bennett, etal, Phys. Rev. Lett. 70, 1895 (1993). 



15 



2. C. H. Bennett, S. J. Wiesner, Phys. Rev. Lett. 69, 2881 (1992). 

3. R. Blume-Kohout, C. Caves, I. Deutsch, Found. Phys. 32, 1641 (2002). 

4. R. Josza, N. Linden, Proc. Roy. Soc. London Ser. A 459, 2011 (2003). 

5. P. Shor, Phys. Rev. A 52, 2493 (1995). 

6. A. R. Calderbank, E. M. Rains, P. W. Shor, N. J. A. Sloane, Phys. Rev. Lett. 78, 405 (1997). 

7. D. Gottesman, Stabilizer codes and quantum error correction, Ph.D. thesis, California In- 
stitute of Technology (1997). 

8. D. Gottesman, Phys. Rev. A 57, 127 (1998). 

9. M. A. Nielsen, I. L. Chuang, Quantum Computation and Quantum Information (Cambridge 
University Press, New York, 2000). 

10. A. M. Steane, Phys. Rev. Lett. 77, 793 (1996). 

11. A. R. Calderbank, P. W. Shor, Phys. Rev. A 54, 1098 (1996). 

12. D. J. C. MacKay, G. Mitchison, P. L. McFadden, IEEE Trans. Inf. Theory 50, 2315 (2004). 

13. D. Fattal, T. S. Cubitt, Y. Yamamoto, S. Bravyi, I. L. Chuang, Entanglement in the stabilizer 
formalism (2004). Quant-ph/0406168. 

14. S. Bravyi, D. Fattal, D. Gottesman, J. Math. Phys. 47, 062106 (2006). 

15. G. Bowen, Phys. Rev. A 66, 052313 (2002). 

16 



16. A. R. Calderbank, E. M. Rains, R W. Shor, N. J. A. Sloane, IEEE Trans. Inf. Theory 44, 
1369 (1998). 

17. Proofs and the detailed construction are available as supporting material on Science Online. 

18. C. H. Bennett, P. W. Shor, J. A. Smolin, A. Thapliyal, IEEE Trans. Inf. Theory 48, 2637 
(2002). 

19. I. Devetak, A. W. Harrow, A. J. Winter, Phys. Rev. Lett. 93, 239503 (2004). 

20. C. Berrou, A. Glavieux, P. Thitimajshima, Proc. ICC '93, Geneva, Switzerland, May 1993 
pp. 1064-1070(1993). 

21. R. G. Gallager, Low-density parity-check codes, Ph.D. thesis, Massachusetts Institute of 
Technology (1963). 

22. E. Knill, R. Laflamme, Phys. Rev. A 55, 900 (1997). 

23. C. H. Bennett, D. P. DiVincenzo, J. A. Smolin, W. K. Wooters, Phys. Rev. A 54, 3824 
(1996). 

24. We would like to acknowledge helpful feedback from David Poulin, Graeme Smith and 
Jon Yard. TAB acknowledges financial support from NSF Grant No. CCF-0448658, and 
TAB and MHH both received support from NSF Grant No. ECS-0507270. ID and MHH 
acknowledge financial support from NSF Grant No. CCF-05248 1 1 and NSF Grant No. CCF- 
0545845. 

17 



